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(57) ABSTRACT 

A communications system extends over a cellular region 
formed of a plurality of wireless cells where each cell covers 
a portion of the cellular region. Each cell has a base station 
which is responsible for communication with the cellular 
subscriber. In order for a call to be properly managed in the 
public cellular domain, responsibility for call handling and 
processing must first be managed by a public MSC. Call 
handling with the public MSC for a private cellular sub- 
scriber first requires the exchange of information between 
the two systems. This is facilitated through the exchange of 
MAP and A interface signaling between the private and 
public cellular systems. Since this information on the private 
network is normally transmitted via IP, this information 
must be converted to standard SS7 based MAP and A 
protocol signaling in order for the public MSC to process. 

43 Claims, 8 Drawing Sheets 
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METHOD AND APPARATUS FOR 
INTEGRATED WIRELESS 
COMMUNICATIONS IN PRIVATE AND 
PUBLIC NETWORK ENVIRONMENTS 



CROSS-REFERENCE TO RELATED 
APPLICATIONS 

Title: METHOD AND APPARATUS FOR INTEGRATED 
WIRELESS COMMUNICATIONS IN PRIVATE AND 
PUBLIC NETWORK ENVIRONMENTS; 

Inventors: Ian Leslie Sayers, Paul Jan Long, Sheausong 
Yang; 

SC/Ser. No.: 09/188,856; 

Title: METHOD AND APPARATUS FOR CONTROL- 
LING WIRELESS NETWORKS 
Inventors: Ian Leslie Sayers, Paul Jan Long, Peter K. Cripps 
SC/Ser. No.: 09/271,596; 

BACKGROUND OF THE INVENTION 

The present invention is a method and apparatus that 
provides for interconnection of private and public cellular 
networks, facilitating the exchange of subscriber profile and 
network data between systems. 

Conventional Cellular Systems 

Present day cellular mobile telephone systems provide for 
a large and increasing demand for mobile services. Cellular 
systems "reuse" frequency within a group of cells to provide 
wireless two-way radio frequency (RF) communication to 
large numbers of users. Each cell covers a small geographic 
area and collectively a group of adjacent cells covers a larger 
geographic region. Each cell has a fraction of the total 
amount of RF spectrum available to support cellular users. 
Cells are of different sizes (for example, macro-cell or 
micro-cell) and are generally fixed in capacity. The actual 
shapes and sizes of cells are complex functions of the 
terrain, the man-made environment, the quality of commu- 
nication and the user capacity required. Cells are connected 
to each other via land lines or microwave links and to the 
public-switched telephone network (PSTN) through tele- 
phone switches that are adapted for mobile communication. 
The switches provide for the hand-off of users from cell to 
cell and thus typically from frequency to frequency as 
mobile users move between cells. 

In conventional cellular systems, each cell has a base 
station with RF transmitters and RF receivers co-sited for 
transmitting and receiving communications to and from 
cellular users in the cell. The base station employs forward 
RF frequency bands (carriers) to transmit forward channel 
communications to users and employs reverse RF carriers to 
receive reverse channel communications from users in the 
cell. 

The forward and reverse channel communications use 
separate frequency bands so that simultaneous transmissions 
in both directions are possible. This operation is referred to 
as frequency division duplex (FDD) signaling. In time 
division duplex (TDD) signaling, the forward and reverse 
channels take turns using the same frequency band. 

The base station in addition to providing RF connectivity 
to users also provides connectivity to a Mobile Services 
Switching Center (MSC). In a typical cellular system, one or 
more MSCs will be used over the covered region. Each MSC 
can service a number of base stations and associated cells in 
the cellular system and supports switching operations for 
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routing calls between other systems (such as the PSTN) and 
the cellular system or for routing calls within the cellular 
system. 

Base stations are typically controlled from the MSC by 

5 means of a Base Station Controller (BSC), The BSC assigns 
RF carriers to support calls, coordinates the handoff of 
mobile users between base stations, and monitors and 
reports on the status of base stations. The number of base 
stations controlled by a single MSC depends upon the traffic 

10 at each base station, the cost of interconnection between the 
MSC and the base stations, the topology of the service area 
and other similar factors. 

A handoff between base stations occurs, for example, 
when a mobile user travels from a first cell to an adjacent 

15 second cell. Handoffs also occur to relieve the load on a base 
station that has exhausted its traffic-carrying capacity or 
where poor quality communication is occurring. The handoff 
is a communication transfer for a particular user from the 
base station for the first cell to the base station for the second 

20 cell. During the handoff in conventional cellular systems, 
there may be a transfer period of time during which the 
forward and reverse communications to the mobile user are 
severed with the base station for the first cell and are not 
established with the second cell. 

25 In time division multiple access (TDMA) systems, mul- 
tiple channels are defined using the same carrier. The 
separate channels each transmit disco ntinuously in bursts 
which are timed so as not to interfere with the other channels 
on that carrier. Typically, TDMA implementations also 

30 employ FDMA techniques. Carriers are reused from cell to 
cell in an FDMA scheme, and on each carrier, several 
channels are defined using TDMA methods. The Global 
System for Mobile Communications (GSM), PCS 1900, 
IS-136, and PDC standards are examples of TDMA methods 

35 ■ 

in current use. 

The present specification uses a GSM system for purposes 
of explanation but the present invention applies to any 
wireless system protocol. 

40 GSM Cellular Systems 

The GSM system architecture is described, for example, 

in detail by M. Mouly and M. -B. Pautet, The GSM System 

for Mobile Commuoications, 1992 and Mouly and M. -B. 

Pautet, GSM Protocol Architecture: Radio Sub-system 
45 Signaling, IEEE 41st Vehicular Technology Conference, 

1991. The following sections highlight some unique aspects 

of GSM systems. 

The GSM system provides many advanced services, 

including: ISDN compatible supplementary services; Global 

roaming among GSM networks and other network types; 

advanced packet data services. 

GSM System Architecture 
There is a very comprehensive set of GSM Specifications 
55 which define the three major components of any GSM 
network, namely, the Mobile Station (MS), Base Station 
Sub-System (BSS) and the Network Sub-System CUSS). 

Base Station Subsystem (BSS) 

60 The Base Station Subsystem (BSS) is subdivided into two 
main entities, the Base Transceiver Station (BTS) and the 
Base Station Controller (BSC). The BTS includes the radio 
transceivers that define the radio cell and supports the radio 
(Um) interface link to the mobile station. The BTS further 

65 supports the defined channel coding, encryption and speech 
coding functions. The BTS interfaces to the BSC via the 
Abis-interface. 
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The Base Station Controller (BSC) manages the radio 
resources of multiple BTSs. The BSC controls all of the 
functions related to the radio network, including the alloca- 
tion and release of radio resources and control of radio 
interface hand-overs. The BSC interfaces to the MSC via the s 
A- interface. 

Network Subsystem 

The network subsystem (NSS) comprises four compo- 
nents these are, the Mobile services Switching Center 
(MSC), Home Location Register (HLR), Visitor Locatioo 10 
Register (VLR), Authentication Centre (AuC) and the 
Equipment Identity Register (EIR). 

The main part of the network subsystem (NSS) is pro- 
vided by the Mobile services Switching Center (MSC). The 
MSC provides the ability to track the mobile user, switch ^ 
calls to/from the user to the PSTN/ISDN/PLMN (public land 
mobile network) and maintain contact with the mobile user 
via radio handovers. 

The GSM PLMN (GSM public land mobile network) 
contains two database functions related to the mobility of the 20 
user these are the Home Location Register (HLR) and the 
Visited Location Register (VLR). 

The Home Location Register (HLR) is used by the 
operator to maintain data on all their subscribers. The 
subscriber data includes both fixed data, such as Interna- 25 
tional Mobile Subscriber Identity (IMSI), subscriber 
MSISDN number and selected supplementary services, and 
dynamic data such as whereabouts of the mobile user and 
current settings for any supplementary services. Whenever a 
mobile users roams into a new Visitor Location Register 30 
(VLR) area the HLR downloads the subscriber data to the 
VLR. The HLR is also required to deal with mobile termi- 
nating calls by routing the call to the correct VLR for further 
processing. 

The Visitor Location Register (VLR) is used as a local 35 
cache to store the subscriber data near the current location of 
the mobile user. Once the VLR has downloaded the sub- 
scriber data the mobile user can begin to use the services 
provided by the network. The process of downloading the 
user data and establishing a presence in a particular location 40 
is called roaming. 

In order to prevent fraudulent use of the network the GSM 
PLMN also contains two further databases the Authentica- 
tion Centre (AUC) and the Equipment Identity Register 
(EIR). 45 

The Authentication Center (AUC) is a maintained in a 
secure environment since it contains the network authenti- 
cation algorithms. The network uses this database to obtain 
data that is used to "challenge" the mobile user when they 
make an access to the network. The AUC uses two algo- 50 
rithms known as A3 and A8, which are also stored in the 
Subscriber Identity Module (SIM) of the user. The A3 
algorithm is used to authenticate the user by the familiar 
challenge response mechanism. The A8 algorithm is used to 
generate the required key for the radio interface encryption 55 
algorithm know as A5. Generally the A3 and AS algorithms 
are developed by the network operators. 

The Equipment Identity Register (EIR) contains a list of 
all the valid International Mobile Equipment Identity (IMEI) 
values. Using the unique IMEI value associated with all 60 
mobiles it is possible restrict the use of specific mobiles. 
This database is used to prevent the use of stolen or 
misbehaving mobile stations. 

Operations and Maintenance 6S 
Associated with the BSS and NSS equipment are Opera- 
tions and Maintenance Centers, OMC-R and OMC-S, 



respectively. The OMC-R and OMC-S provide the following 
standard operations and maintenance control functions for 
the GSM BSS and NSS: 

Configuration Management 

Fault management 

Test Management 

Performance Management 

Security Management 

Account Management 
Other functions may be available depending upon the BSS 
or NSS manufacturer. In addition the OMC-S may also be 
required to perform database or user management functions 
on the HLR and VLR. 

Basic Services Provided by GSM 

GSM was designed to be a feature rich mobile services 
with most services based upon ISDN principles. In basic 
terms the GSM provides a basic set of services which can be 
enhanced by the use of supplementary services. The Basic 
Services include: 

Speech, the most basic service 

Short Message, a two way messaging service 

Group 3 FAX, this services allows connection to Group 3 

FAX machines 
Cell Broadcast, this service allows messages to be broad- 
cast to the mobile stations. 
The Bearer Services include: 

Asynchronous Data 300-14400 bps, allows access to 

normal V-Series Modems 
Synchronous Data 300-14400 bps, allows access to CSP- 

DNs 

General Packet Radio Services 9600-170000 bps, a 
packet services allowing seamless access to the inter- 
net. 

The following GSM supplementary services are currently 
available: 
Call Forwarding 
Call Barring Services 
Call Transfer 
Conference Calling 
Call Wait and Call Hold 
Calling Line Identification 
Call Completion to a Busy Subscriber 

Problems with Private/Public cellular networks 
communicating MAP via IP 

In wireless systems, it is often necessary to exchange 
MAP information between the private and public cellular 
networks. In the case of modern voice over IP (VoIP) H323 
and other IP based networks, it is not possible to commu- 
nicate using the cellular protocols such as Mobile Applica- 
tion Part (MAP) or A-interface protocol via SS7. 
Conversely, neither is it possible for the public system to 
communicate using MAP or A-interface protocol with an 
H.323 or IP based network. 

In accordance with the above background, it is the object 
of the present invention to provide wireless systems having 
the capability to exchange MAP interface information 
between IP and SS7 environments and between an IP 
network using an A-Interface. 

SUMMARY OF THE INVENTION 
The present invention is a communication system extend- 
ing over a cellular region and formed of a plurality of 
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wireless cells where each cell covers a portion of the cellular 
region. The communication system includes first and second 
wireless networks that use different protocols for commu- 
nications in connection wilh mobile stations. The system 
includes a connection unit for interconnecting the first and 
second wireless networks and includes an interworking unit 
for protocol conversion between the different protocols. 

The first wireless network, such as a public wireless 
network (PLMN), communicates with a first protocol, such 
as Signaling System #7 (SS7), for one or more first cells in 
the first wireless network. Each of the first cells includes a 
first base station for communicating with mobile stations in 
a first cell and a first control means using the first protocol 
for communications associated with the first base station. 
The second wireless network, such as a private wireless 
network, communicates with a second protocol, such as IP, 
for one or more second cells in the second wireless network. 
Each of the second cells includes a second base station for 
communicating with mobile stations in a second cell and a 
second control means using the second protocol for com- 
munications associated with the second base station. 

The first and second wireless networks are connected 
through the connection unit that includes a gateway, such as 
a H.323 gateway, for coordinating communications between 
the different protocols used in the first and second wireless 
networks. The gateway or other parts of the connection unit 
may reside anywhere in the communication system such as 
on the premises of the private wireless network or on the 
premises of the PLMN cellular operator's site. The connec- 
tion unit includes a cell router for routing calls among the 
base stations. The cell router is implemented in various 
embodiments using IP routers, Frame Relay and ATM 
switches. 

The first and second wireless networks are coordinated by 
the interworking unit that translates commands in one pro- 
tocol to those in another. Where the first and second wireless 
networks are PLMN and IP networks, the interworking unit 
includes, for example, an SS7 stack, an IP stack and a 
protocol converter for converting messages between IP 
messages and MAP messages, A-Interface messages or 
messages of other protocols. 

The interworking unit may reside anywhere in the com- 
munication system such as on the premises of the private 
wireless network or on the premises of the PLMN cellular 
operator's site. The interworking unit is typically software 
executing on an suitable computing platform. The platform 
can use, for example, a Windows NT, a Unix or other 
operating system. In a typical configuration, communica- 
tions internal to the private wireless network are via H.323 
and communications with a public wireless network 
(PLMN) to an MSC and/or HLR are via a SS7 based link. 

The present invention is useful in a communication sys- 
tem formed by a private network that includes a private 
wireless network based on IP. The communication system is 
also useful in public wireless networks using public wireless 
protocols, such as GSM, TDMA, or CDMA. These public 
systems typically connect to other public networks, such as 
PSTN, ISDN and the Internet using a wired protocol, such 
as IP, ATM or Frame Relay. The private network also 
typically includes a local area network (LAN) and the 
private network typically connects to the public networks 
using a wired packet protocol, such as IP. 

In connection with some embodiments, the public and 
private wireless networks operate with the same public 
wireless protocol, such as GSM, TDMA or CDMA, and the 
private wireless network additionally operates with a wired 
packet protocol, such as IP. 
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The private wireless network uses private base stations 
(P-BTS) which include software for a wireless protocol, 
such as GSM, TDMA or CDMA, including software for 
private network operation with a wired protocol, such as IP. 

5 The communication system permits users to operate 
freely in both public and private wireless networks using 
standard mobile stations while achieving high private net- 
work data rates. The communication system typically uses 
normal wireless handsets or other mobile or fixed stations 

30 without need for any modifications. 

The private base stations (P-BTS) in one embodiment are 
directly connected to a private LAN and thereby enable 
standard wireless stations to make and receive calls over the 
LAN. Also, the range of calls, using standard Internet 

15 protocols, extends between LANs and between different 
corporations over the Internet without requiring the support 
of a public switch (e.g. MSC). The wireless stations can 
freely roam between the public wireless network and the 
private wireless network and a single telephone number can 

20 be assigned to a mobile station for use in both the public and 
the private wireless networks. 

The foregoing and other objects, features and advantages 
of the invention will be apparent from the following detailed 

M description in conjunction with the drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram representation of a communi- 
cation system including a public wireless network, other 
30 public networks such as PSTN, ISDN and the Internet and 
including private networks. 

FIG. 2 depicts private networks and public networks 
including a public wireless network connected to a private 
wireless network. 
35 FIG. 3 depicts the architecture of a public land mobile 
network interworking unit (PLMN IWU) used in the private 
wireless network of FIG. 2 to communicate with the public 
land mobile network (PLMN). 

FIG. 4 depicts a representation of the signaling links and 
40 the traffic links between the private wireless network and the 
public wireless network in FIG. 1 and FIG. 2. 

FIG. 5 depicts the location update procedures for a public 
user in the private network using the PLMN IWU. 
45 FIG. 6 depicts the location update procedures for a private 
user in the public network using the PLMN IWU. 

FIG. 7 depicts a Mobile Terminated Call (MTC) to a 
public user in the private network. 

FIG. 8 depicts a Mobile Terminated Call (MTC) to a 
50 private user in the public network. 

FIG. 9 depicts the call flows of a public user in the private 
network. 

FIG. 10 depicts the call flows of a private user in the 
public network. 

55 

DETAILED DESCRIPTION 

Communication System — FIG. 1 and FTG.2. 

In FIG. 1, the communication system 10 includes a public 
60 wireless network 15, public networks 8 (such as PSTN, 
ISDN and the Internet) and private networks 14. The public 
wireless network 15 includes the ability to communicate, in 
a conventional manner, with conventional wireless mobile 
stations 4. The private networks 14 function to communicate 
65 with the conventional mobile stations 4 and provide addi- 
tional private network capabilities not provided by the 
public wireless network 15. 
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The public wireless network 15 of FIG. 1, sometimes 
called the public land mobile network (PLMN), includes the 
mobUe stations (MS) 4, Base Station Sub-System (BSS) 5 
and the Network Sub-System (NSS) 6. The Base Station 
Subsystem (BSS) 5 is composed of the Base Transceiver 5 
Stations (BTSs) 12 and the Base Station Controller (BSC) 
16. Each of the BTSs 12 includes a radio transceiver that 
defines the radio boundary of a cell 11 and handles the radio 
(Urn) interface protocols with the mobile stations 4. 

The cells 11 in the wireless public network 15 of FIG. 1 10 
each exist over a different area and together the cells 11 
collectively exist over a larger area designated as a region 
111. Each cell 11 in the region 111 uses frequencies or other 
properties that are isolated from the frequencies or other 
properties of other cells in the region. When mobile stations l5 
4 travel from one of the cells 11 to another one of the cells 
11, a hand-over occurs. 

The private networks 14 of FIG. 1 include private base 
stations (P-BTSs) 27 within the private wireless networks 22 
for communications with mobile stations 4 located within 20 
the domain of the private networks 14. The private base 
stations (P-BTSs) 27 function in private regions formed of 
private cells (see private cells 411 of FIG. 4) within the 
domain of the private networks 14 of FIG. 1. The private 
cells 411 typically cover a portion of the area covered by one 2 5 
or more of the cells 11 of the public wireless network 15 of 
FIG. 1. Typically, the allocation of frequency spectrum in 
different public and private regions is under governmental 
control and frequency spectrum is allocated to different 
entities in different regions and different countries. The 30 
owner of the rights to particular frequencies in a region, 
including regions for public wireless network 15 and private 
wireless networks 22, controls the allocation of frequencies 
among public cells 11 of FIG. 1 and the private cells 411 (see 
FIG. 4). 35 

The Base Station Controller (BSC) 16 manages the radio 
resources of one or more BTSs 12 across an Abis interface. 
The BSC 16 controls the radio network, including allocation 
of radio time slots and frequencies to mobile stations 4, 
release of resources, interpretation of measurement results 40 
and control of radio interface hand-overs. The BSC 16 
interfaces to the NSS 6 via an A-interfacc to MSC 17. The 
Network Subsystem (NSS) 6 includes the Mobile services 
Switching Center (MSC) 17 that provides, in a conventional 
system, the functions required to switch calls to/from the 45 
mobile stations 4 and the fixed public networks 8 (including 
PSTN and ISDN). In addition, the MSC 17 also provides the 
functions needed to track and maintain communication with 
mobile stations 4 and these functions include registration, 
authentication, location updating, MSC hand-overs, and call 50 
routing to roaming mobile stations 4. The GSM/TDMA/ 
CDMA cellular system employs a Home Location Register 
(HLR) 19 and a Visitor Location Register (VLR) 13, an 
Authentication Center (AUC) secure database 2 and an 
Equipment Identity Register (EIR) 3. The Operations and 55 
Maintenance Center includes the OMC-R 7 and the OMC-S 
9. 

In FIG. 1, private networks 14 include the private wireless 
networks 22 (including private wireless networks 22-1, . . . , 
22-W as shown in FIG. 2), private wired networks 24, 60 
including local area networks (LANs, 24-1, . . . , 24-L, as 
shown in FIG. 2), and connection units 29 (including 
connection units 29-1, . . . , 29-1 as shown in FIG. 2). The 
private networks 14 can include wide area networks (WAN) 
and any other type of network presently or hereafter avail- 65 
able. As shown in FIG. 2, the connection units 29 of FIG. 1 
include, in one embodiment, hubs 23 for interconnecting the 
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private wireless networks 22 and the LANs 24 and for 
connecting the private networks 14 to the public networks 8. 
As shown in FIG. 2, a typical hub 23 connects to a router 33 
that directs calls among the public network facilities includ- 
ing the ISDN 28, the PSTN 26, the Internet 25 and the 
private networks 14. The private networks 14 use the same 
protocol as the Internet 25 and connects directly without 
need for a separate gateway. The connection units 29 
include, as shown in FIG. 2, gateways 42-1, 42-2, . . . , 42-G 
for connecting the ISDN 28 and the PSTN 26 which use 
different protocols than the private networks 14. 

Ln FIG. 1, the private wireless networks 22 include the 
wireless capabilities of the public wireless network 15 of 
FIG. 1. In addition, the private wireless networks 14 are 
suitable for operating with advanced technologies that are 
not generally available publicly. Current advanced technolo- 
gies operate with rates of 384 kb/s and are approaching rates 
of 2 Mb/s for W-CDMA. In FIG. 1, wireless communica- 
tions between the public BTSs 12 and mobile stations 4 
operate with a wireless protocol such as GSM/TDMA/ 
CDMA. In FIG. 1, wireless communications between the 
private P-BTSs 27 and mobile stations 4 for convenience 
and compatibility operate with the same wireless protocol 
(such as GSM/TDMA/CDMA) as used by the public BTSs 
12 in the public wireless network 15. 

[n FIG. 1, the private wired networks 24 are typically 
local area networks (LANs) operating with a wired packet 
protocol such as IP. 

The private wireless networks 22 in FIG. 1 do not require 
the internal support of a circuit switch from the public 
networks and therefore, the private networks 14 in the FIG. 
1 system can easily expand to accommodate new user 
requirements under control of the owners of the private 
networks 14. 

In the private networks 14 of FIG. 1, the mobile stations 
4 are typically unmodified, conventional wireless mobile 
station handsets like those widely used in conventional 
public wireless networks and therefore the mobile stations 4 
can freely move between the public wireless network 15 of 
FIG. 1 and the private wireless networks 22 of FIG. 1 
without restriction. Because of this free movement 
capability, only a single number is required for each mobile 
station 4 for both private wireless network communications 
and for public wireless network communications. 

The private wireless networks 22 of FIG. 1 have P-BTSs 
27 with corresponding private cells (P cells) 411 (see FIG. 
4) in the private wireless domain. The public wireless 
network 15 of FIG. 1 has BTSs 12 with corresponding 
public cells 11 in the public wireless domain. The allocation 
of frequencies among the public wireless network cells and 
the private network cells is determined by agreement of the 
owners of the public wireless network 15 and the private 
networks 14. 

The private wireless networks 22 of FIG. 1 each have an 
interworking unit (IWU) 39 that facilitates the inter working 
of different protocols that coact in processing calls from one 
wireless network to another. The private wireless networks 
22 of FIG. 1 have gatekeepers 41 that function to correlate 
addresses that are for the same mobile stations but which are 
presented in different protocols. 

Interconnected Public Wireless Network and 
Private Wireless Network— FIG. 2 

In FIG. 2, private networks 14 include private networks 
14-1, . . . , 14-N. Private network 14-1 is typical and includes 
the private wireless networks 22 (including private wireless 
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networks 22-1, . . . , 22-W), local area networks (LANs) 24 
(including LANs 24-1, . . . , 24-L), and connection units 29 
(including connection units 29-1, . . . , 29-1). The private 
networks 14 can include wide area networks (WAN) and any 
other type of network presently or hereafter available. The 
connection unit 29 includes a hub 23 for interconnecting the 
private wireless networks 22 and the LANs 24 and for 
connecting the private network 14-1 to the public networks 
8. The hub 23 connects to the router 33 that directs calls 
among the public network facilities including the ISDN 
28, ... , PSTN 26 and the Internet 24 and the private 
networks 14. The private networks 14 use the same protocol 
as the Internet 25 and connect directly without need for a 
separate gateway. The connection unit 29 includes gateways 
42-1, . . . , 42-G for connecting the ISDN 28, ... , PSTN 26 
which use different protocols than the private networks 14. 

In FIG. 2, the private wireless networks 22 include the 
wireless capabilities of the public wireless network IS of 
FIG. 1. In FIG. 2, wireless communications between the 
private P-BTSs 27 and mobile stations 4 for convenience 
and comparability operate with the same wireless protocol 
(such as GSM) as used by the public BTSs 12 in the public 
wireless network 15. 

In FIG. 2, the local area networks (LANs) 24 are private 
wired networks operating with a wired packet protocol such 
as IP. LAN 24-1 is typical and includes, for example, a 
server 25 and LAN terminals 21 (including terminals 
21-1, . . . , 21-T). Terminals 21-1, . . . , 21-T communicate 
with each other and with the public networks 8 through 
connection unit 29 using the wired packet protocol. 

In FIG. 2, the P-BTSs 27-1, . . . , 27-P are associated with 
protocol converters 28-1, . . . , 28-P, respectively, that 
connect P-BTSs 27-1, . . . , 27-P to connection unit 23 using 
the private network protocol used by the LANs 24 and the 
router 23. Therefore, the mobile stations 4 communicating 
through the P-BTSs 27 in the private networks 14 have 
access to the terminals 21 in LANs 24 and have access to the 
public networks 8. 

In FIG. 2, the wireless P-BTS 27 direcdy connect the 
mobile stations 4 through router 33 to other facilities in 
private networks 14 and thereby permit, for example, the 
mobile stations 4 to send and receive calls to and from the 
terminals 21 in the LAN networks 24. Furthermore, the 
range of calls from and to mobile stations 4 in the private 
wireless network 22, using standard Internet protocols (IP), 
extends over the Internet in public networks 8 to any Internet 
facility such as different LANs and different corporations in 
different regions or countries. 

The private wireless networks 22 in FIG. 2 do not require 
the internal support of a circuit switch (for example, an 
MSC) from the public networks and therefore, the private 
networks 14 in the FIG. 2 system can easily grow to 
accommodate new user requirements under control of the 
owners of the private networks 14. 

In the private networks 14 of FIG. 2, the mobile stations 
4 are typically unmodified, conventional wireless mobile 
station handsets like those widely used in conventional 
public wireless networks and therefore the mobile stations 4 
can freely move between the public wireless network 15 of 
FIG. 1 and the private wireless networks 22 of FIG. 2 
without restriction. Because of this free movement 
capability, only a single number is required for each mobile 
station 4 for both private wireless network communications 
and for public wireless network communications. 

The private wireless networks 22 of FIG. 2 have P-BTSs 
27-1, . . . , 27-P which operate in the private cells 411 (See 
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FIG. 4). The allocation of frequencies among the public 
wireless network cells 11 and the private network cells 411 
is determined by agreement of the owners of the public 
wireless network 15 and the private networks 14. 

5 In order to allow users to roam freely between the public 
wireless network 15 and private wireless networks 22, a 
PLMN interworking unit (PLMN IWU) 39-1 is provided. 
The PLMN IWU 39-1 connects to the Private Wireless 
Networks, Gatekeeper 41 and the PLMN 15. The PLMN 

io IWU 39-1 can be connected to the H.323 Gatekeeper 
database 43 by a number of means, however in this example, 
the IWU is connected via an IP link. The PLMN IWU 39-1 
is connected to the PLMN via a Signaling System 7 (SS7) 
link that is running Message Transfer Part (MTP), Signaling 

35 Connection Control Part (SCCP), Transactions Control 
Application Part (TCAP) and the Mobile Application Part 
(MAP). The PLMN IWU 39-1 converts between the signal- 
ing protocols found in the Private Network 22-1 which are 
based upon IP and the PLMN which is based up SS7. 

20 In FIG. 2, the gatekeeper 41 includes a local database (see 
data base 43 in FIG. 4) which communicates via IP provid- 
ing local user authentication, a local client for communicat- 
ing with a remote protocol gateway (gateway 42 provides 
remote IP-to-SS7 conversion) through cell router 34, and a 

25 local interface module which communicates over IP to the 
PLMN IWU 394. 

Public Land Mobile Network 
Interworking Unit — FIG. 3 

30 FIG. 3 shows the internal architecture of the interworking 
unit (IWU) 39 when the IWU is a Public Land Mobile 
Network Interworking Unit (PLMN IWU) which provides a 
link between the domain of the private wireless network 22 

35 and the domain of the public wireless network (PLMN) 15. 
In a preferred embodiment, the signaling for the private 
wireless network 22 operates in the IP domain and signaling 
for the public wireless network 15 operates in the SS7 
domain. In such an embodiment, the PLMN IWU 39-1 
contains two independent software stacks 37-1 and 37-2, 
one for the private IP domain and one for the public SS7 
domain. 

The first stack 37-1 is used to interface with the SS7 
network and includes standard MTP, SCCP and TCAP 

45 layers. On top of these layers is a Message Encoder/Decoder 
layer which is responsible for receiving and dispatching of 
messages from/to the SS7 network. This layer functions to 
take the messages generated by the Mobile Application Part 
and correctly format them for use by the lower layers of the 

50 first stack 37-1. The Mobile Application Part is a standard 
stack layer as defined for GSM, TMDA and CDMA cellular 
systems. 

The second stack 37-2 is used to interface with the IP 
network and includes standard IP and TCF/UDP layers. On 

55 top of these layers is a Message Encoder/Decoder layer 
which is responsible for the receiving and dispatching of 
messages from/to the IP network. This layer functions to 
take the messages generated by the Protocol Conversion 
layer and correctly format them for use by the lower layers 

go of the second stack. 

The main functionality of the PLMN IWU 39-1 is con- 
tained in the Protocol Conversion layer. The Protocol Con- 
version layer functions within the PLMN W 39-1 to process 
commands (called pseudo-MAP messages in the description 

65 below) sent by the IP network (originating from the H323 
database 43) and converting them to MAP messages that can 
be recognized by the public wireless network 15. In the 
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embodimeat described, the particular messages are based 
upon the H.323 suite of protocols, however other VoIP 
protocols, such as SIP, can be similarly implemented in the 
IP-MAP Protocol Conversion layer. The operation of the 
Protocol Conversion layer is algorithmically predetermined 
with a mapping between all the H 323 messages and their 
MAP counterparts. When a pseudo-MAP message of, for 
example, type A arrives from the H.323 IP side of the unit 
it is converted into a MAP message type B for sending out 
on the public wireless network 15 SS7 side. Similarly if a 
message of type B arrives on the public wireless network 15 
SS7 side it will be converted to type Aon the H.323 IP side 
of the unit 

In order to correctly address the messages between the 
SS7 entities and IP entities, a database 38 is provided that 
maps SS7 point codes or E.164 numbers to their correspond- 
ing IP addresses. Using this scheme, all messages reach their 
correct recipients. The database 38 in one embodiment is 
statically set via the operations and maintenance interface 
and in another embodiment is dynamically built as new 
addresses are received. 

The CAM Functions maintain the operation of the PLMN 
IWU 39-1. The OAM Functions are responsible for admin- 
istering the database 38 and all the addresses that are needed 
in the communication system. The OAM Functions are also 
responsible for correctly assigning SS7 and IP address to the 
PLMN IWU 39-1 itself so that it may appear in both the IP 
and SS7 domains. 

In the embodiment described, the PLMN IWU 39-1 
software functions are located in one common entity. 
However, in other embodiments, the PLMN RWU 39-1 
software functions are split into two or more separate 
entities that are in the same or in different locations in the 
communication system. For example, the Protocol Conver- 
sion function for converting between IP and MAP messages 
can be performed in one entity, such as the H.323 database 
43, and the sending of MAP messages on the SS7 network 
can be performed in another entity. 

Signaling Links and Traffic Links Between Private 
and Public Wireless Networks — FIG. 4 

FIG. 4 provides a detailed view of a private wireless 
network 22, having a PLMN IWU 39, interconnected 
between the public wireless network (PLMN) 15 and private 
wireless network 22. The private wireless network 22 
includes a plurality of P-BTS 27, including P-BTS 27-1, 
27-P, each associated with a corresponding private cell 411, 
including the private cells 411-1, . . . , 411-P, respectively. 
The public wireless network 15 includes an MSC 17 and a 
BSS 5 associated with the public cell 11. The public cell 11 
typically covers a larger area than the private cells 411 and 
typically the private cells 411 are within the operating region 
of the public cell 11. Each of the public and private cells 
include mobile stations 4, for example, mobile station 4-1 is 
typical of the mobile stations serviced by P-BTS 27-1 in the 
private wireless network 22 and mobile station 4-P is typical 
of the mobile stations serviced by P-BTS 27-P in the private 
wireless network 22. The mobile station 4-15 is typical of 
the mobile stations serviced by BSS 5 in the public wireless 
network 15. 

In FIG. 4, the PLMN IWU 39-1 is interconnected to the 
public HLR 19 and MSC 17 of the public wireless network 
(PLMN) 15 via signaling links (shown as broken lines in 
FIG. 4). In the embodiment described, these signaling links 
use the SS7 protocol. The PLMN IWU 39-1 also connects to 
the gatekeeper 41 that includes the H323 database 43 via a 
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signaling link that uses the IP protocol. In the embodiment 
described, the PLMN IWU 39-1 connection to the gate- 
keeper 41 only carries signaling information, however, in 
other embodiments, it may carry voice or other related 

s signaling traffic. 

While the PLMN IWU 39-1 has been shown as a single 
entity located in the private wireless network 22, the PLMN 
IWU 39-1 can also be located in the public wireless network 
15 (shown with broken lines as 39-1') as a single entity or 

10 can be distributed in parts at various different locations. The 
links between the PLMN IWU 39-1 and other components 
are implemented as a function of where the PLMN IWU 
39-1 or its parts are located. In FIG. 4, the PLMN IWU 39-1 
is located as a single entity in the private wireless network 

15 22 and the links from the PLMN IWU 39-1 with the MSC 
17 and HLR 19 exist in different forms. In one form, the 
links are leased lines or other direct connections. In another 
embodiment, the connections between the PLMN IWU 39-1 
and the PLMN 15 are indirect through, for example, the cell 

20 router 34. 

In FIG. 4, the public wireless network (PLMN) 15 
includes the gatekeeper 41 that connects to a connection unit 
29. The connection unit 29 includes means for interconnect- 
ing a mobile station 4, for example, mobile station 4-1 

25 serviced by P-BTS 27-1 in the private wireless networks 22 
to another mobile station 4, for example, mobile station 4-P 
serviced by P-BTS 27-P in the private wireless network 22. 
Also, the connection unit 29 includes means for intercon- 
necting a mobile station 4, for example, mobile station 4-1 

30 serviced by P-BTS 27-1 in the private wireless networks 22 
to another mobile station 4, for example, mobile station 
41-15 serviced by the BSS 5 in the public wireless network 
15. When such connections involve different signaling 
protocols, each of the protocols are abstracted to the protocol 

35 (for example, H.323) database 43. 

The connection unit 29 can use any convenient switching 
or routing apparatus for directing calls from one mobile 
station to another. For example, in one embodiment 

4Q described, the cell router 34 in connection unit 29 is an IP 
router that uses IP addresses for routing calls among the 
P_BTSs 27 or for routing calls through H.323 gateway 42 
to the public wireless network 15. In another example, the 
cell router 34 includes an ATM or other switch that switches 

45 calls among mobile stations 4 located in any of the cells 
including public cell 11 and private cells 411-1, . . , , 411-P. 

The gatekeeper 41 enables protocol independent cell 
routing using cell router 34 with information from address 
correlation database 43. Gatekeeper 41 includes a lookup 

50 table which correlates identifiers in different protocols. The 
different protocols include, for example, IP addresses, 
MSRN numbers, and virtual circuit identifiers (VCI)- The 
correlation performed in gatekeeper 41 using database 43 
enables any embodiment of cell router 34 to correlate 

55 identifiers from different protocols. By way of example, the 
router 34 in different embodiments is implemented as an IP 
router, a frame relay switch, or an ATM switch. In each of 
these embodiments, cell router 34 functions to switch and/or 
route mobile traffic to and from mobile stations 4. 

60 The switching role of a conventional MSC 17, such as 
shown in FIG. 1, is fulfilled by packet or cell routing 
hardware included within cell router 34. In operation, for 
example, when a mobile station 4 in FIG. 4 requests a path 
through the network, the gatekeeper 41 maps an MSRN 

65 number to an appropriate IP address in the case of an IP 
router. In operation, for another example, when a mobile 
station 4 in FIG. 4 requests a path through the network, the 
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gatekeeper 41 maps a VCI address to an appropriate IP 
address in the case of an ATM switch and further the 
gatekeeper 41 maps an MSRN number to the appropriate IP 
address. Similar mappings are effected for any IP, frame, 
ATM switch or other routing or switching mechanism. The 
IP, MSRN, VCI or other identifier mapping occurs in the 
gatekeeper 41 and hence operation is independent of any 
particular embodiment of router 34. Also, the particular 
routing mechanism employed for switching calls among 
cells is external to the private wireless network 22. The 
private wireless network 22 is able to operate with any 
protocol that may exist or may be defined. 

Operation 

The operation of the PLMN IWU 39-1 and the commu- 
nication system 10 of FIG. 1 are described in connection 
with four call flows presented in FIG. 5, FIG. 6, FIG. 7 and 
FIG. 8 for a system in which the pubUc wireless network 15 
operates in the SS7 domain and the private wireless network 
22 operates in the IP domain. In each of those figures, the 
operation inside the double-boarded box represents the 
functionality of the IP/SS7 Protocol Conversions for signal- 
ing. 

Location Update Procedures for a Public User on 
the Private Network— FIG. 5. 

In FIG. 5, the signaling flows that are used to register the 
Public User on the Private Network are presented. 

In the first part of the call flow, the Public Users Mobile 
Station (MS) accesses the P-BTS using the standard Channel 
Request/Immediate Assignment signaling messages. This is 
followed by the Location Update Request message contain- 
ing the IMSI and LAI from the Mobile Station. Upon 
receiving this message, the P-BTS then sends an H.323 
Registration Request (RRQ) to the H.323 database 43. The 
RRQ contains the IMSI information for the Mobile Station. 
The H.323 database 43 then translates this information into 
the correct psuedo-MAP message, in this case an 
UPDATE_LO CATION which contains the IMSI of the 
Mobile Station and the originating IP address of the H.323 
database 43. When the message arrives at the PLMN IWU 
39-1, using IP, it is translated further into a complete MAP 
message, in this case MAP_UPDATE__LO CATION, and 
the SS7 point code or E.164 number of the Public Users 
HLR 19 is derived from the IMSI and appeoded to the 
message. The complete message can now be passed to the 
SS7 network and sent to the Public Users HLR 19. At the 
same time a new TCAP transaction is opened and associated 
with the IP address and transaction identity of the H.323 
database 43, as well as the SS7 address of the HLR 19. Upon 
receipt of this message, the HLR 19 will perform the 
standard operations to verify the users identity. If successful, 
the HLR 19 will then return the MAP_INSERT_ 
SUBSCRIBER_D ATA request which contains not only the 
mobile subscribers IMSI but also the complete subscriber 
database contents for that user. In addition, the message will 
also contain the SS7 address of the HLR 19 so that the 
authenticity of the message can be verified by the H.323 
database 43 upon receipt. 

When the H.323 PLMN IWU 39-1 receives the MAP_ 
INSERT_SUBSCRIBER_DATA request, it first checks 
that the SS7 address is valid, if this passes then the message 
is translated into the IP format as INSERT_DATA Using 
the transaction identity stored when sending the first MAP_ 
UPDATE_LO CATION message, the PLMN IWU 39-1 is 
able to determine the destination for the message. When the 
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H.323 database 43 receives the INSERT_DATA message, 
the data contained in the message is stored in its local 
database for use in future processing. If all the information 
is correct, the H.323 database 43 now acknowledges the data 

5 using the INSERT_DATA^ACK message. This informa- 
tion is again translated by the PLMN IWU 39-1 into the 
appropriate MAP message, in this case INSERT_DATA_ 
ACK, and sent to the HLR 19. If the acknowledgement is 
acceptable to the HLR 19, it then sends a MAP_UPDATE_ 

io LOCATION confirm to the PLMN IWU 39-1. The PLMN 
IWU 39-1, upon receipt of this message, reformats the 
contents into UPDATE_LOCATION_ACK and sends the 
message to the H.323 database 43. At this point, the trans- 
action information related to the signaling between the 

15 H.323 database 43 and the HLR 19 can be removed as it is 
no longer required. 

Upon receipt of the UPDATE_LOCATION__ACK 
message, the H.323 database 43 sends a Registration Con- 
firm (RCF) message to the P-BTS on the private network. 

20 Receipt of the RCF triggers a series of standard radio 
interface messages which include Authentication of the 
Mobile User, Ciphering of the radio link should it be needed. 
This operation may lead to reallocation of the TMSI if 
required by the network operator. At the end of this process, 

25 the radio resources are released using the standard Channel 
Release, Disconnect and UA message sequence. 

Location Update Procedures for a Private User on 
the Public Network— FIG. 6. 

30 In FIG. 6 the signaling flows that are used to register the 
Private User on the Public Network are presented. 

tn the first part of the call flow, the Private Users Mobile 
Station (MS) accesses the public networks BSS/GMSC/ 
VLR, generally using the standard Channel Request/ 

35 Immediate Assignment signaling messages, these are not 
shown here. Upon receipt of the Location Update Request 
from the MS, containing the IMSI, the public network can 
determine that this is a private user location update request, 
consequently all the message links for this user are now 

40 directed to the PLMN IWU 39-1 serving this private user. 
The public network continues the location update process by 
sending a MAP_UPDATE_LO CATION request to the 
PLMN IWU 39-1 containing the IMSI of the private user. 
The PLMN IWU 39-1 then translates this into the correct 

45 psuedo-MAP message, in this case a UPDATE_ 
LOCATION which contains the IMSI of the Private Mobile. 
The PLMN IWU 39-1 also stores the SS7 address and 
transaction identity of the originating entity in the public 
network for future reference. The UPDATE_LOCATION 

50 message is then forwarded onto the correct H.323 database 
43. The PLMN IWU 39-1 determines the correct H.323 
database 43 by using its internal database which maps the 
incoming IMSI onto the IP address of the H.323 database 43. 
When the UPDATE_LOCATION message arrives at the 

55 H.323 database 43, it is checked for consistency. In addition 
checks are made to determine if the private subscriber is 
allowed to roam to the public network. If the private mobile 
user is not allowed to roam, then the response to the message 
would be negative (not shown) and the dialogue would be 

60 terminated. However, if the user is allowed to roam, then the 
H.323 database 43 responds with the pseudo-MAP message 
INSERTED ATA to the PLMN IWU 39-1 serving the public 
network. The correct PLMN IWU 39-1 is determined by 
using the source IP address provided when the UPDATE_ 

65 LOCATION message was received. The INSERT_DATA 
message contains all the subscriber database information 
required by the public network. 
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When the PLMN IWU 39-1 receives the INSERT_DATA 
message, it is translated into the correct MAP message, in 
this case a M AP_INSERT_SUBS CRIBER_D ATA 
request, and sent to the originating SS7 node using the SS7 
address supplied in the original MAP_UPDATE_ 
LOCATION request. If the SS7 receiving entity accepts the 
message from the private network then the MAP„ 
INSERT_SUBSCRIBER_DATA confirmation is returned 
to the PLMN IWU 39-1. This message is then translated into 
the pseudo-MAP INSERT_SUBSCRJBER_DATA mes- 
sage and sent to the H.323 database 43 supporting the user. 
If the response is accepted by the H.323 database 43, then 
the UPDATE_LOCA3TON_ACK is sent to the PLMN 
IWU 39-1. The PLMN IWU 39-1 will then translate this to 
the required MAP_UPDATE_LOCATION confirm mes- 
sage. At this point, the transaction information related the 
signaling between the H.323 database 43 and the HLR 19 
can be removed as it is no longer required. 

Upon receiving the MAP_UPDATE_LO CATION con- 



ROAMING_NUMBER confirmation message to be sent to 
the public HLR 19. This message will contain the MSRN 
provided by the H.323 database 43 as well as the correct 
destination address and transaction identity. When the Public 
5 HLR 1 receives this message, it sends the MSRN to the 
requesting GMSC using the standard MAP_SEND_ 
ROUTING__INFO confirmation message. The GMSC then 
uses the MSRN to route the call to the H.323 gateway 
serving the Private Network, this is shown by the SETUP 
io [MSRN#1] message. 

When the H.323 Gateway receives the SETUP message 
with the allocated MSRN, it sends the H.323_SETUP 
message with the MSRN#1 to the H.323 database 43 and 
sends a Call Proceeding message to the public network. The 
15 H.323 database 43 can then determine which Public Mobile 
user is being called by using the MSRN-IMSI association 
established in the earlier part of the dialogue. Once the final 
destination has been determined by the H.323 database 43 
using the MSRN-IMSI-IP address mapping, the call can be 



firm message, the public network may start a series of 20 further routed to the P-BTS using an H.323_SETUP mes- 



standard radio interface messages which include Authenti- 
cation of the Mobile User, Ciphering of the radio link should 
it be needed. This operation may lead to reallocation of the 
TMSI if required by the network operator. At the end of this 
process, the radio resources are released using the standard 
Channel Release, Disconnect and UA message sequence. 

Mobile Terminated Call (MTC) to a Public User in 
the Private Network— FIG. 7. 



In FIG. 7 the signaling flows that are used to contact a 
Public User that is located on the Private Network are 
presented. 

In the first part of the call flow, a SETUP message is 
received by the Gateway MSC (GMSC) in the public 35 ^^J^ puWicTer^ork. 
network from the Calling Part (CGP), The SETUP message r 



sage containing the original dialed digits. 

When the P-BTS receives the H.323_SETUP message, it 
will begin the standard cellular mobile terminated call 
procedures with an initial Paging Request. The Mobile 
25 Station then responds to the Paging Request and the radio 
link can be established, this may include H.323 Access 
Request (ARQ) and Access Confirmation (ACF). Once the 
correctly ciphered link has been established, the P-BTS can 
then send the SETUP message to the mobile. The mobile 
responds with the Call Confirmed message. The network can 
then assign the radio resources and generate the Alerting 
message for the public network. If the public user is 
available, the mobile can be answered, which generates the 
Connect/Connect Ack message sequence as well as the 



contains the Dialed Number (DN) of the user, in this case 
1234. The GMSC will now try to locate the called user, in 
order to do this the standard MAP message MAP_SEND_ 
ROUTING_INFO request containing the dialed number is 40 
sent to the Public Network HLR 19. The Public HLR 19 then 
uses the previous location update information (see cases 
above) to locate the user. In this case, the user is located on 
the Private Network and the request (MAP_PROVIDE_ 
ROAMING_NUMBER) for a roaming number is sent to 45 
the PLMN IWU 39-1 serving the Private Network. The 
PLMN IWU 39-1 upon receipt of the MAP_PROVIDE_ 
ROAMING_NUMBER message uses the destination 
address contained in the message to determine the location 
of the H.323 database 43 serving the public user. Once the 50 
destination has been found, the message is translated into the 
pseudo-MAP message, PROVIDE__ROAMING_ 
NUMBER request, for dispatch to the serving H.323 data- 
base 43. Upon receipt of the PROVIDE„ROAM-ING_ 
NUMBER message, the H.323 database 43 checks whether 55 
or not this user is registered in the database. If the user is not 
registered, then the message is rejected (not shown). If the 
user is present, then the H.323 database 43 selects a Mobile 
Station Roaming Number (MSRN) from the allocated pool, 



Mobile Terminated Call (MTC) to a Private user in 
the Public Network FIG. 8, 

In FIG. 8 the signaling flows that are used to contact a 
Private User that is located on the Public Network are 
presented. 

In the first part of the call flow, a SETUP message is 
received by the H.323 Gateway in the private network from 
the Calling Part (CGP), this message is forwarded onto the 
H.323 database 43. The SETUP message contains the Dialed 
Number (DN) of the user, in this case 1234. As the H323 
database 43 will now try to locate the called user, in order 
to do this the H.323 database 43 generates the pseudo-MAP 
PROVIDE _ROAMING_NUMBER message, including 
adding the SS7 address of MSC/VLR serving the private 
user, which is forwarded to the PLMN IWU 39-1. The 
PLMN IWU 39-1 then generates the MAP_PROVIDE„ 
ROAMING_JWMBER to request the roaming number 
from the MSC/VLR serving the Private Mobile user. 

When the serving MSC receives the MAP_PROVIDE_ 
R0AM1NG_NUMBER request, it checks that the user 
indicated by the IMS1 in the message is present in the VLR 
of the MSC 17. If the user is present, then the MSC/VLR 



it then also associates the selected MSRN with the IMSI of 60 will select a MSRN from its pool of numbers and return the 



the user in its internal databasse. The H.323 database 43 can 
now format a pseudo-MAP response message, PROVIDE_ 
ROAMING_NUMBER ack, containing the MSRN that can 
be sent back to the PLMN IWU 39-1. 

When the PLMN IWU 39-1 receives the PROVIDE_ 
ROAMING __NUMBER ack from the H.323 database 43, it 
formats the message into the MAP_PROVIDE_ 



MAP PROVIDE ROAMING NUMBER confirmation, con- 
taining the MSRN, to the PLMN IWU 39-1 indicated in the 
received message. 

The PLMN IWU 39-1, upon receipt of the MAP_ 
PROVIDE_JROAMING_NUMBER confirm message, 
uses the origination address and transaction identifier to 
forward its pseudo-MAP PROVIDE„ROAMING_ 
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NUMBER message to the H.323 database 43. The H.323 
database 43 uses the MSRN received in the PROVIDE_ 
ROAMING_NUMBER message to redirect the users call to 
the H .323 gateway. In this case since the call has already 
arrived at the H.323 gateway it must redirect the call using 
the H.323_SETUP divert leg option with the MSRN# as the 
diverted to number. Od receipt of the H.323_SETUP 
message, the H.323 gateway can generate a public network 
SETUP message towards the Public Network, using the 
provided MSRN#. In order to clean up the call control in the 
H.323 gateway the H.323 database 43 then uses the Facility 
message to indicate that the call currently being set up is a 
diverted call and this operation then generates a Call Pro- 
ceeding message to the Calling Part (CGP). 

When the public network receives the SETUP message, it 
will begin the standard cellular mobile terminated call 
procedures with an initial Paging Request. The Mobile 
Station then responds to the Paging Request and the radio 
link can be established. Once the correctly ciphered link has 
been established, the Public Network can then send the 
SETUP message to the mobile. The mobile responds with 
the Call Confirmed message. The network can then assign 
the radio resources and generate the Alerting message for the 
public network. If the public user is available, the mobile can 
be answered, which generates the Connect/Connect Ack 
message sequence as well as the Connect into the public 
network. 

Mobile Terminated Call Operation for Public User 
in Private Wireless Network — FIG. 9 

In FIG. 9, the private network 14 includes a private 
wireless network 22, having a PLMN IWU 39-1, intercon- 
nected to the public wireless network (PLMN) 15. The 
private wireless network includes a plurality of P-BTSs 27, 
including P-BTS 27-1, . . . , 27-P, each associated with a 
corresponding private cell 411 as shown and described in 
connection with FIG. 4. The public wireless network 15 
includes an MSC 17 and a BSS 5 associated with a public 
cell 11 as shown and described in connection with FIG. 4. 

In FIG. 9, the PLMN IWU 39-1 is interconnected to the 
public HLR 19 of the public wireless network (PLMN) 15 
via signaling links (shown as broken lines in FIG. 9). In the 
embodiment described, these signaling links use the SS7 
protocol. The PLMN IWU 39-1 also connects, via a signal- 
ing link that uses the IP protocol, to the gatekeeper 41 and 
the H.323 database 43. 

In FIG. 9, the private wireless network 22 includes a 
gatekeeper 41 that connects to a connection unit 29. The 
connection unit 29 includes means for interconnecting a 
mobile station 4, for example, mobile station 4-1 serviced by 
P-BTS 27-1 in the private wireless network 22, to a call 
being initiated by the public wireless network 15. 

In FIG. 9, for purposes of explanation, it is assumed that 
mobile station (MS) 4-1 has a calling number #1234. A Call 
For MS#1234 is present in the MSC 17. The Call For 
MS#1234 may have originated with a mobile station in the 
public wireless network 15 or otherwise. The sequence of 
processing in FIG. 9 for the Call For MS#1234 is repre- 
sented by circled numbers including circle„l circle_2, . . . , 
circle_ll. 

In FIG. 9 at circle_l the MSC 17 sends a request for 
routing information to the HLR 19. 

At circled, the HLR 19 sends a request for a roaming 
number to PLMN IWU 39-1. At circle_3, PLMN IWU 39-1 
sends a request for a roaming number to gatekeeper 41 and 
the H.323 database 43. At circle___4, the H.323 database 43 
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returns the MSRN (Mobile Station Roaming Number) to the 
PLMN IWU 39-1. At circle_5 the PLMN IWU 39-1 for- 
wards the MSRN to the HLR 19. At circle_6, the HLR 
forwards the MSRN to the MSC 17. At circle_7, the traffic 

5 at MSC 17 associated with the Call For MS#1234 is for- 
warded to the H.323 gateway 42. At circle_8, the traffic 
from H.323 gateway 42 is forwarded to cell router 34. At 
circle_9, the MSRN for the Call For MS#1234 is forwarded 
to gatekeeper 41 and the H.323 database 43 to obtain an 

10 associated IP address. At circle_10, the associated IP 
address is returned to cell router 34. In the present example, 
the IP address for the Call For MS#1234 is assumed to be for 
the P-BTS 27-1. At circle_ll, the call traffic for the Call For 
MS#1234 is routed to P-BTS 27-1 and thence over the air 

15 interface to mobile station 4-1 which is the mobile station 
having MS#1234. 

Mobile Terminated Call Operation for Private User 
in Public Wireless Network — FIG. 10 

20 In FIG. 10, the private network 14 includes a private 
wireless network 22, having a PLMN IWU 39-1, intercon- 
nected to the public wireless network (PLMN) 15. The 
private wireless network includes a plurality of P-BTSs 27, 
including P-BTS 27-1, . . . , 27-P, each associated with a 

25 corresponding private cell 411 as shown and described in 
connection with FIG. 4. The public wireless network 15 
includes an MSC 17 and a BSS 5 associated with a public 
cell 11 as shown and described in connection with FIG. 4. 
In FIG. 10, the PLMN IWU 39-1 is interconnected to the 

30 MSC 17 of the public wireless network (PLMN) 15 via 
signaling links (shown as broken lines in FIG. 10). In the 
embodiment described, these signaling links use the SS7 
protocol. The PLMN IWU 39-1 also connects, via a signal- 
ing link that uses the IP protocol, to the gatekeeper 41 and 
the H.323 database 43. 

In FIG, 10, the private wireless network 22 includes a 
gatekeeper 41 that connects to a connection unit 29. The 
connection unit 29 includes means for interconnecting a 

4Q mobile station 4, for example, mobile station 4-15 serviced 
byBSS 15 in the public wireless network 15, to a call being 
initiated by the private wireless network. The mobile station 
4-15 in FIG. 10 is, for example, the same mobile station 4-1 
in FIG. 9 that has moved from being serviced by the private 

45 wireless network 22 to being serviced by the public wireless 
network 15. 

In FIG. 10, for purposes of explanation, it is assumed that 
mobile station (MS) 4-15 has the same calling number 
#1234 as mobile station 4-1 in FIG. 9 and that mobile 

50 stations 4-1 and 4-15 are the same unit. A Call For MS#1234 
is present in the gateway 42. The Call For MS#1234 may 
have originated with a mobile station in the private wireless 
network 22 or otherwise. The sequence of processing in FIG. 
10 for the Call For MS#1234 is represented by circled 

55 numbers including circle„l, circle_2, . . . , circle_10. 

In FIG. 10 at circle_l, the gateway 42 sends a request for 
routing information to the router 34. At circle_2, the router 
34 sends a request for routing information to the gatekeeper 
41 and database H.323. At circle„_3, the gatekeeper 41 sends 

60 a request for a roaming number (Mobile Station Roaming 
Number) to PLMN IWU 39-1. At circle_4, PLMN IWU 
39-1 sends a request for a roaming number to MSC 17. At 
circle_5, the MSC 17 returns the MSRN to the PIMN IWU 
39-1. At circle_6 the PLMN IWU 39-1 forwards the MSRN 

65 to the gatekeeper 43 and database 43. At circle_7 the 
gatekeeper 41 forwards the MSRN to the cell router 34. At 
circle_8, the cell router forwards the MSRN to the gateway 
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42. Al circle_9, the traffic from H.323 gateway 42 is 
forwarded to MSC 17. At circle_10, the traffic for the Call 
For MS#1234 is forwarded to BSS thence over the air 
interface to mobile station 4-15 which is the mobile station 
having MS#1234. 

While the invention has been particularly shown and 
described with reference to preferred embodiments thereof it 
will be understood by those skilled in the art that various 
changes in form and details may be made therein without 
departing from the scope of the invention. 

What is claimed is: 

1. A communication system extending over a cellular 
region and formed of a plurality of wireless cells where each 
cell covers a portion of the cellular region comprising, 

a first wireless network using a first protocol for commu- 
nicating with one or more first cells in the first wireless 
network and wherein each one of said first cells 
includes, 

a first base station for communicating with mobile 
stations in one of said first cells, 

first control means using the first protocol for commu- 
nications associated with said first base station, 
a second wireless network using a second protocol for 

communicating with one or more second cells in the 

second wireless network and wherein each one of said 

second cells includes, 

a second base station for communicating with mobile 
stations in one of said second cells, 

second control means using the second protocol for 
communications associated with said second base 
station and including a gatekeeper communicating 
with said second base station for each of said second 
cells using said second protocol, 
a connection unit for interconnecting the first wireless 

network and the second wireless network to cany 

traffic, 

an interworking unit for correlating communications 
using said first protocol with communications using 
second protocol to control said traffic between said first 
wireless unit and the second wireless unit. 

2. The communication system of claim 1 wherein said 
gatekeeper communicates with the connection unit or inter- 
working unit. 

3. The communication system of claim 2 wherein said 
gatekeeper includes a database for correlating addresses in 
said first and second protocols. 

4. The communication system of claim 3 wherein said 
database is an H.323 database and said second protocol is IP. 

5. The communication system of claim 1 wherein said 
gatekeeper communicates using said second protocol with 
the connection unit or interworking unit, 

6. The communication system of claim 1 wherein said 
gatekeeper includes, 

a local database which communicates via IP for providing 

authentication, 
a local client for communicating with a remote protocol 

gateway, and 

a local interface for communicating with the interworking 
unit using an IP protocol. 

7. The communication system of claim 1 wherein said 
connection unit includes a gateway for transporting com- 
munications between said second wireless network using 
said second protocol and another network using another 
protocol. 

8. The communication system of claim 7 wherein said 
another network using another protocol is a PSTN network, 
and ISDN network or a PLMN network. 
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9. The communication system of claim 7 wherein said 
gateway is located on a premises with said second wireless 
network where said second wireless network operates with 
an IP protocol. 

5 10. The communication system of claim 7 wherein said 
gateway is located on a premises with said first wireless 
network where said first wireless network operates with an 
SS7 protocol. 

11. The communication system of claim 7 wherein said 
50 gatekeeper communicates using said second protocol with 

the connection unit or interworking unit. 

12. The communication system of claim 1 wherein said 
first wireless network is a public wireless network. 

13. The communication system of claim 12 wherein said 
j 5 public wireless network is a Public Land Mobile Network. 

14. The communication system of claim 1 wherein said 
second wireless network is a private wireless network. 

15. The communication system of claim 1 wherein said 
first wireless network is a public wireless network having 

20 one or more public cells and wherein said second wireless 
network is a private wireless network having one or more 
private cells within one or more of said public cells and 
having mobile stations that move among the private and 
public cells. 

25 16. The communication system of claim 1 wherein said 
interworking unit includes a first stack for processing mes- 
sages according to said first protocol, includes a second 
stack for processing messages according to said second 
protocol and includes a protocol converter for converting 

30 messages between said first protocol and said second pro- 
tocol. 

17. The communication system of claim 16 wherein said 
first stack includes MIT, SCCP and TCAP layers for an SS7 
protocol and wherein said second stack includes IP and 

35 TCP/UDP layers for an EP protocol. 

18. The communication system of claim 16 wherein said 
interworking unit includes one or more message encode/ 
decode layers connected to a database for storing conver- 
sions of messages between said first and second protocols. 

40 19. The communication system of claim 16 wherein said 
interworking unit includes a Mobile Application Part layer 
adjacent one of said message encode/decode layers for said 
first stack. 

20. The communication system of claim 1 wherein said 
4 5 second wireless network is a private wireless network and 

said interworking unit is located on a premises of said 
private wireless network. 

21. The communication system of claim 1 wherein said 
first wireless network is a public wireless network and said 

50 interworking unit is located on a premises of said public 
wireless network. 

22. A communication system extending over a cellular 
region and formed of a plurality of wireless cells where each 
cell covers a portion of the cellular region comprising, 

55 one or more public networks including, 

a PLMN first wireless network using a first protocol for 
communicating with one or more first cells in the 
first wireless network and wherein each one of said 
first cells includes, 
60 a BSS including a first base station for communicat- 

ing with mobile stations in one of said first cells, 
first control means including a BSC using the first 
protocol for communications associated with 
said first base station, 
65 one or more private networks including, 

a second wireless network using a second protocol for 
communicating with one or more second cells in the 
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second wireless network and wherein each one of 
said second cells includes, 

a second base station for communicating with mobile 

stations in one of said second cells, 
second control means using a second protocol for 5 
communications associated with said second base 
station and including a gatekeeper communicating 
with said second base station for each of said 
second cells using said second protocol, 
a wired network communicating with said second 10 
protocol, a connection unit for interconnecting the 
public networks and the private 
networks to carry traffic, 
an interworking unit for correlating communications 
using said first protocol with communications using 35 
said second protocol to control said traffic between said 
public networks and the private networks. 

23. The communication system of claim 22 wherein said 
gatekeeper with the connection unit or interworking unit. 

24. TTie communication system of claim 22 wherein said 20 
gatekeeper includes a database for correlating addresses in 
said first and second protocols. 

25. The communication system of claim 22 wherein said 
database is an H.323 database and said second protocol is IP. 

26. The communication system of claim 22 wherein said 25 
gatekeeper communicates using said second protocol with 
the connection unit or interworking unit. 

27. The communication system of claim 22 wherein said 
gatekeeper includes, 

a local database which communicates via IP for providing 30 

authentication, 
a local client for communicating with a remote protocol 

gateway, and 

a local interface for communicating with the interworking 35 
unit using an IP protocol. 

28. The communication system of claim 22 wherein said 
connection unit includes a gateway for transporting com- 
munications between said second wireless network using 
said second protocol and another network using another 40 
protocol. 

29. The communication system of claim 28 wherein said 
another network using another protocol is a PSTN network, 
and ISDN network or a PLMN network. 

30. The communication system of claim 29 wherein said 45 
gateway is located on a premises with said second wireless 
network where said second wireless network operates with 

an IP protocol. 

31. The communication system of claim 29 wherein said 
gateway is located on a premises with said first wireless 50 
network where said first wireless network operates with an 
SS7 protocol. 

32. The communication system of claim 28 wherein said 
gatekeeper communicates using said second protocol with 
the connection unit or interworking unit. 55 

33. The communication system of claim 22 wherein said 
first wireless network is a public wireless network. 

34. The communication system of claim 33 wherein said 
public wireless network is a Public Land Mobile Network. 

35. The communication system of claim 22 wherein said 60 
second wireless network is a private wireless network. 

36. The communication system of claim 22 wherein said 
first wireless network is a public wireless network having 



one or more public cells and wherein said second wireless 
network is a private wireless network having one or more 
private cells within one or more of said public cells and 
having mobile stations that move among the private and 
public cells. 

37. The communication system of claim 22 wherein said 
interworking unit includes a first stack for processing mes- 
sages according to said first protocol, includes a second 
stack for processing messages according to said second 
protocol and includes a protocol converter for converting 
messages between said first protocol and said second pro- 
tocol. 

38. The communication system of claim 37 wherein said 
first stack includes MTP, SCCP and TCAP layers for an SS7 
protocol and wherein said second stack includes IP and 
TCP/UDP layers for an IP protocol. 

39. The communication system of claim 37 wherein said 
interworking unit includes one or more message encode/ 
decode layers connected to a database for storing conver- 
sions of messages between said first and second protocols. 

40. The communication system of claim 37 wherein said 
interworking unit includes a Mobile Application Part layer 
adjacent one of said message encode/decode layers for said 
first stack. 

41. The communication system of claim 22 wherein said 
second wireless network is a private wireless network and 
said interworking unit is located on a premises of said 
private wireless network. 

42. The communication system of claim 22 wherein said 
first wireless network is a public wireless network and said 
interworking unit is located on a premises of said public 
wireless network. 

43. A communication method for wireless communication 
extending over a cellular region formed of a plurality of 
wireless cells where each cell covers a portion of the cellular 
region comprising, 

communicating with a first protocol for one or more first 
cells in a first wireless network wherein each one of 
said first cells, 

communicating with mobile stations in one of said first 

cells using a first base station, 
communicating with said first base station using the 

first protocol, 

communicating with a second protocol for one or more 
second cells in a second wireless network wherein each 
one of said second cells, 

communicating with mobile stations in one of said 
second cells using a second base station, 

communicating with said second bases station using 
the second protocol and accessing a gatekeeper com- 
municating with said second base station for each of 
said second cells using said second protocol, 
interconnecting the first wireless unit and the second 

wireless unit to carry traffic, and 
correlating communications using said first protocol with 

communications using said second protocol to control 

said traffic between said first wireless unit and the 

second wireless unit. 
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